The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an IDAT chunk with a length of zero.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 6c020f05253df04c3480b586fe188a3582740049 |
| n/a | n/a | <= 6.1.* |